This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft
File: 53576544C2D7C29DEC5245A4A81C19686D1160AA.mft (raw, json)
Hash identifier: 8fQqZFaZZz8qqksoXerys3Ykb0X6OsblJE7vGIimsiU=
Subject key identifier: 13:2E:7B:42:DB:23:69:FC:D8:89:9E:BC:8B:2D:66:6A:22:97:C7:61
Authority key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA
Certificate issuer: /CN=53576544C2D7C29DEC5245A4A81C19686D1160AA
Certificate serial: 12E4E52440B2CCF1F6E1E77E1405BE329B146C6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft
Manifest number: 016C
Signing time: Fri 05 Dec 2025 19:50:41 +0000
Manifest this update: Fri 05 Dec 2025 19:45:41 +0000
Manifest next update: Tue 09 Dec 2025 03:04:41 +0000
Files and hashes: 1: 53576544C2D7C29DEC5245A4A81C19686D1160AA.crl (hash: jEru4O2MPsA6sRptqJvUcm6QcIaV33hANY9yfW/eblc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl
rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 03:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e4:e5:24:40:b2:cc:f1:f6:e1:e7:7e:14:05:be:32:9b:14:6c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA
Validity
Not Before: Dec 5 19:45:41 2025 GMT
Not After : Dec 9 03:04:41 2025 GMT
Subject: CN=132E7B42DB2369FCD8899EBC8B2D666A2297C761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:73:6a:bc:45:1c:a6:17:d5:5d:3d:3d:d1:2a:
fe:b2:21:d2:b2:cd:69:f7:27:9c:85:52:a4:11:6f:
6f:18:02:73:d1:a4:19:da:38:32:1d:fb:fa:e7:d7:
05:cd:3b:c2:cf:5c:7f:86:32:10:d7:a4:84:cf:4d:
fb:dd:fc:ba:f8:c6:47:f2:80:ed:86:bb:7c:7d:ec:
98:72:53:7a:7f:45:12:18:b5:ef:3e:2f:89:b7:c9:
7b:71:9b:51:af:c3:c4:1c:8e:ca:53:91:19:bf:47:
55:34:34:34:d3:98:dd:b5:31:f8:da:9f:99:82:7b:
c7:3a:13:60:56:ca:dd:c1:c3:00:ec:83:c3:66:bc:
08:84:5b:9e:9a:2e:f3:9c:48:39:e1:e3:f2:e3:fe:
97:20:8a:64:4b:bf:c0:41:bf:38:fd:e3:3e:8d:ea:
08:f2:d8:c5:bb:d3:28:6e:80:c4:0b:17:2e:f1:9d:
2f:71:95:26:01:23:80:80:39:d9:a7:fa:c8:b9:03:
df:a1:8b:9e:b4:e8:58:4d:94:d5:b4:ca:51:86:20:
05:8c:63:62:d1:19:d2:b3:3b:bd:48:7a:aa:64:c7:
e4:b1:f5:d4:ad:43:68:c0:d7:cd:11:31:ff:dd:e4:
82:76:55:4a:ab:65:cd:5b:40:50:2e:26:06:42:71:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2E:7B:42:DB:23:69:FC:D8:89:9E:BC:8B:2D:66:6A:22:97:C7:61
X509v3 Authority Key Identifier:
keyid:53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7e:3b:09:43:64:68:84:7d:24:f8:7b:2e:e8:bb:eb:90:6c:
79:0e:e8:e8:7d:66:20:69:49:3d:34:b7:73:50:9c:4b:c3:90:
5f:b7:01:f0:b2:27:b0:13:7c:ba:cf:06:1b:a5:3a:87:37:7f:
ff:ef:2e:07:b7:35:28:28:af:af:d9:28:0b:89:1a:3e:f4:c6:
2a:19:77:b4:5a:35:49:ba:25:4b:f9:fa:d9:82:f0:18:0f:e6:
e2:63:12:78:3c:ce:c0:eb:7f:4d:69:21:1d:53:83:62:00:67:
55:5a:90:bd:bd:62:4c:07:06:2e:54:be:8b:5c:12:a7:08:da:
1b:77:fa:7e:bd:e2:dc:8a:49:fe:0c:81:fa:f0:33:b4:a4:3a:
03:ec:92:39:fa:20:8e:05:c7:ce:8f:1b:d9:ea:8c:15:06:ee:
cc:8a:f5:63:cf:05:4b:fb:72:20:9e:14:28:93:4f:5e:d4:d8:
7c:f8:16:bf:c2:c9:8c:cc:86:5c:53:fc:29:31:95:d2:af:5c:
35:8a:1c:23:7b:f5:5c:f0:cf:7c:76:95:78:75:c2:44:20:ea:
fa:9a:36:20:bc:f2:65:00:a8:1e:d7:04:3b:a7:e7:77:23:90:
22:17:10:4c:f5:ce:bd:b6:aa:55:e9:64:06:40:42:23:9c:f6:
22:46:38:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:56:27 2025 by rpki-client